200-301 practice questions 901–910

1. Question 901 · 1334 in bank

   How do TCP and UDP differ in the way that they establish a connection between two endpoints?

   • ATCP uses the three-way handshake, and UDP does not guarantee message delivery.
   • BTCP uses synchronization packets, and UDP uses acknowledgment packets.
   • CUDP provides reliable message transfer, and TCP is a connectionless protocol.
   • DUDP uses SYN, SYN ACK, and FIN bits in the frame header while TCP uses SYN, SYN ACK, and ACK bits.

   Show answer

   Answer: A

   Explanation

   The correct answer is A. TCP uses the three-way handshake, and UDP does not guarantee message delivery. TCP and UDP are two different transport layer protocols that are commonly used in computer networks. Both protocols are used to establish a connection between two endpoints, but they differ in the way that they establish and maintain that connection.

   Source: Adapted from community discussion — Masquerade

   Next question

2. Question 902 · 1334 in bank

   What is the binary pattern of unique ipv6 unique local address?

   • A00000000
   • B11111100
   • C11111111
   • D11111101

   Show answer

   Answer: B

   Explanation

   Correct answer: B IANA actually reserves prefix FC00::/7, and not FD00::/8, for these addresses. FC00::/7 includes all addresses that begin with hex FC IPv6 Unique local address are in the block of FC00::/7 So , the pattern is composed of the bits that don´t change F - 1111 C - 1100 /7 - 1111110 Letter B Letter D is 11111101 - FD , not a Unique Local Address

   Source: Adapted from community discussion — Rob2000

   References

   • Cisco documentation
   • RFC Editor

   Next question

3. Question 903 · 1334 in bank

   Which QoS tool can you use to optimize voice traffic on a network that is primarily intended for data traffic?

   • AWRED
   • BFIFO
   • CPQ
   • DWFQ

   Show answer

   Answer: C

   Explanation

   C)Priority Queuing (PQ). PQ allows you to assign a higher priority to voice traffic, which ensures that voice packets are transmitted before data packets. This helps to minimize delays and jitter in the transmission of voice traffic, which can improve the overall quality of the call. Other QoS tools, such as Weighted Fair Queuing (WFQ) and Weighted Random Early Detection (WRED), can also be used to optimize voice traffic, but PQ is generally the most effective option for this purpose.

   Source: Adapted from community discussion — Phonon

   Next question

4. Question 904 · 1334 in bank

   

   Refer to the exhibit. Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?

   • ADefine a NAT pool on the router.
   • BConfigure the ip nat outside command on another interface for VLAN 200
   • CConfigure static NAT translations for VLAN 200.
   • DUpdate the NAT_INSIDE_RANGES ACL.

   Show answer

   Answer: D

   Explanation

   D is correct answer because of the following command: "ip nat inside source list NAT_INSIDE_RANGES interfaces G0/0 Overload". This command essentially tells the router all ip addresses specified from the access list "NAT_INSIDE_RANGES" will be translated via port address translation (PAT) using the ip address of G0/0. By reconfiguring the ACL to include the 200 vlan it will provide the easiest way to get VLAN 200 access to the internet.

   Source: Adapted from community discussion — RougePotatoe

   Next question

5. Question 905 · 1334 in bank

   An organization secures its network with multi-factor authentication using an authenticator app on employee smartphones. How is the application secured in the case of a user's smartphone being lost or stolen?

   • AThe application requires the user to enter a PIN before it provides the second factor
   • BThe application requires an administrator password to reactivate after a configured interval
   • CThe application verifies that the user is in a specific location before it provides the second factor
   • DThe application challenges a user by requiring an administrator password to reactivate when the smartphone is rebooted

   Show answer

   Answer: A

   Explanation

   That is not MFA. PIN is something you know Password is also something you know. For it to be multi-factor you must have more than 1 factor. In this case you have only demonstrated the use of 1 factor. The 3 categories are something you know, something you have, and something you are. Something you have is like an authentication app or device. Something you are is biometric such as finger printing.

   Source: Adapted from community discussion — RougePotatoe

   Next question

6. Question 906 · 1334 in bank

   Which device performs stateful inspection of traffic?

   • Aswitch
   • Bfirewall
   • Caccess point
   • Dwireless controller

   Show answer

   Answer: B

   Explanation

   B is correct. Explanation: Stateful inspection, also known as dynamic packet filtering, is a firewall technology that monitors the state of active connections and uses this information to determine which network packets to allow through the firewall.

   Source: Adapted from community discussion — dicksonpwc

   Next question

7. Question 907 · 1334 in bank

   A network administrator enabled port security on a switch interface connected to a printer. What is the next configuration action in order to allow the port to learn the MAC address of the printer and insert it into the table automatically?

   • Aenable dynamic MAC address learning
   • Bimplement static MAC addressing
   • Cenable sticky MAC addressing
   • Dimplement auto MAC address learning

   Show answer

   Answer: C

   Explanation

   Actually, why couldn't it be B as well ? The mac address does not need to be sticky, it can also be just "dynamic". Sticky adds the learned mac into the running config, what simple dynamic doesn't, but that doesn't prevent the mac to be learned too if it was just "dynamic". Edit: I think the reason is that we don't have to "enable" dynamic. It is automatically enabled when do run switchport port-security.

   Source: Adapted from community discussion — sinear

   Next question

8. Question 908 · 1334 in bank

   

   Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password?

   • AR1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234 R1(config-line)#transport input telnet
   • BR1(config)#username admin privilege 15 secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local
   • CR1(config)#username admin secret p@ss1234 R1(config-if)#line vty 0 4 R1(config-line)#login local R1(config)#enable secret p@ss1234
   • DR1(config)#username admin R1(config-if)#line vty 0 4 R1(config-line)#password p@ss1234

   Show answer

   Answer: B

   Explanation

   To allow administrators to authenticate directly to enable privilege mode via Telnet using a local username and password, the correct additional configuration is: B. R1(config)#username admin privilege 15 secret p@ss1234 R1(config)#line vty 0 4 R1(config-line)#login local Explanation: Option B provides the correct configuration for enabling Telnet access with local authentication. Here's a breakdown of the commands: R1(config)#username admin privilege 15 secret p@ss1234: This command creates a local username "admin" with privilege level 15 and sets the password as "p@ss1234". The privilege level 15 grants administrative access to the user. R1(config)#line vty 0 4: This command enters the configuration mode for the virtual terminal lines (vty) from 0 to 4, which are used for Telnet access. R1(config-line)#login local: This command enables local authentication for Telnet access on the vty lines, meaning the switch will use the locally configured username and password for authentication.

   Source: Adapted from community discussion — IFBBPROSALCEDO

   Next question

9. Question 909 · 1334 in bank

   Which effect does the aaa new-model configuration command have?

   • AIt enables AAA services on the device.
   • BIt configures the device to connect to a RADIUS server for AAA.
   • CIt associates a RADIUS server to the group.
   • DIt configures a local user on the device.

   Show answer

   Answer: A

   Explanation

   Effete derives from Latin effetus, meaning "no longer fruitful," and for a brief time in English it was used to describe an animal no longer capable of producing offspring. Seems like it ;)

   Source: Adapted from community discussion — jeroenptrs93

   References

   • Cisco documentation

   Next question

10. Question 910 · 1334 in bank

    Select 2

    Refer to the exhibit. Which two events occur on the interface, if packets from an unknown Source address arrive after the interface learns the maximum number of secure MAC address? (Choose two.)

    

    • AThe security violation counter dose not increment
    • BThe port LED turns off
    • CThe interface is error-disabled
    • DA syslog message is generated
    • EThe interface drops traffic from unknown MAC address

    Show answer

    Answer: AE

    Explanation

    protect—Drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value. restrict—Drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value and causes the SecurityViolation counter to increment. shutdown—Puts the interface into the error-disabled state immediately and sends an SNMP trap notification.

    Source: Adapted from community discussion — BooleanPizza

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 901. 1334 questions available.